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Abstract. Although Buchberger’s algorithm, in theory, allows us to compute 
Grobner bases over any field, in practice, however, the computational efficiency 
depends on the arithmetic of the ground field. Consider a field K = Q(q:), a 
simple extension of Q, where a is an algebraic number, and let / G Q[t] be the 
minimal polynomial of a. In this paper we present a new efficient method to 
compute Grobner bases in polynomial rings over the algebraic number field K. 
Starting from the ideas of Noro m, we proceed by joining / to the ideal to be 
considered, adding t as an extra variable. But instead of avoiding superfluous 
S-pair reductions by inverting algebraic numbers, we achieve the same goal by 
applying modular methods as in Enacg, that is, by inferring information 
in characteristic zero from information in characteristic p > 0. For suitable 
primes p, the minimal polynomial / is reducible over Fp. This allows us to ap¬ 
ply modular methods once again, on a second level, with respect to the factors 
of /. The algorithm thus resembles a divide and conquer strategy and is in 
particular easily parallelizable. At current state, the algorithm is probabilistic 
in the sense that, as for other modular Grobner basis computations, an effec¬ 
tive final verification test is only known for homogeneous ideals or for local 
monomial orderings. The presented timings show that for most examples, our 
algorithm, which has been implemented in Singular 0, outperforms other 
known methods by far. 


1. Introduction 


From the theoretical point of view, Grobner bases computations can be done over 
any held by using Buchberger’s algorithm (see, for example, mm- In particular, 
they can be performed over an algebraic number field, but the computation is often 
inefficient if the arithmetic operations in this field are used directly. Consider a 
simple extension K = Q(a) of Q. Let / S Q[t] be the minimal polynomial of 
a. The algebraic number field K can be represented as the residue class ring 
Q[t]/ (/), and a Grobner basis computation over K can then be reduced to one over 
Q by joining / to the ideal to be considered. Unfortunately, this method is not 
satisfactory in view of efficiency. One of the reasons for this is that over the field of 
rational numbers, we often suffer from coefficient swell. Various methods to avoid 
this have been investigated; the trace algorithm m and modular algorithms nmn] 
are successful in this direction. But using these approaches, we still have to deal 
with the complicated arithmetic in algebraic number fields, in particular with the 
computation of inverses. 

In this paper we present a new efficient method to compute Grobner bases over 
an algebraic number field. Starting from a polynomial ring over Q as explained 
above, we apply the modular methods for computing Grobner bases discussed in 
miaiio] to pass to positive characteristic p. Ghoosing a set V of suitable prime 
numbers, see Definition 5.2 the image fp of / in Fp[t] is, for p G V, reducible 


and square-free. We can thus again apply modular methods, with respect to the 
factors fi^p,..., fr^^p of fp, passing to the rings ¥p[t]/{fi^p). As above, we avoid 
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computing in quotient rings by joining fi^p to the ideal to be considered. Having 
computed the corresponding reduced Grobner basis for each of these factors, we 
first recombine the results to a set of polynomials Gp over ^p[t]/{fp) using Chinese 
remaindering for polynomials. In a second lifting step, the sets Gp, p € V, are 
then used to reconstruct a set of polynomials G over Q, via Chinese remaindering 
for integers and rational reconstruction. Finally, we test whether G is indeed the 
reduced Grobner basis of the input ideal. If not, we enlarge V and repeat the 
process. 

In Section we introduce some notation which is used throughout this article. 
The structure of the new method is outlined in Section [S] Since this method relies 
on the Chinese remainder algorithm applied to different domains, we shortly recall 
the relevant theoretical background in Section The core part of the proposed 
algorithm is discussed in Section Here we explain how modular methods are 
applied on different levels and why our approach is considerably faster than other 
known methods. The application of modular methods follows a well-known scheme, 
see [3]. For reference, we recall the relevant parts of this scheme in Section]^ An 
illustrating example is given in Section Finally, Section contains remarks on 
the implementation of the new method in Singular [7] and timings comparing it 
to other approaches. The benchmark problems which we used for the timings are 
listed in the appendix. 


2. Notation 

Let K = Q(a) be an algebraic number field and let / € Q[t] be the minimal 
polynomial of the algebraic number a. Then every element of K can be written 
as a linear combination of elements in {1, a, c ?,..., where d = deg /. Hence 

we may regard every element of AT as a polynomial in a with coefficients in Q. Let 
X = {xi,... ,Xn} be a set of variables, and let t be an extra variable. Consider 
the polynomial rings S = Q(a)[A], T = Q[A,t], and Q[t]. Fix a global monomial 
ordering on the monoid of monomials Mon(A) and consider the product ordering 
>-K'-= (!^i, >-) on Mon(A, t), where is the global ordering on Mon(t). Note that 
this implies X°‘ >-k for all a S N" \ {(0,..., 0)} and 6 S N. 

Let H = {gi {X, t),..., gs{X,t)} he a subset of T, let / C S' be the ideal generated 
by H := {gi{X, a),... ,gs{X, a)}, and let 7 C T be the ideal generated by 77 U {/}. 
Furthermore, let G C T be the reduced Grobner basis (see [3 Definition 1.6.2]) of 7 
w.r.t. 'i^K- Let ip be the canonical homomorphism from T to S which leaves the Xi 
fixed and maps t to a. We will show, in Theorem |5.H that the non-zero elements 
of ip(G) C S form the reduced Grobner basis of 7 w.r.t. ;^i. 

For a carefully chosen prime p (see Definition |5.2[ ) which does not divide any 
denominator of the coefficients of / and gi(X, t),... ,gs{X, t ), we consider the map 
from Q to Fp which sends f to ab~^ G Fp. Applying this map to the coefficients, 
we write fp := (fmodp) G Fp[t] and Ip := {gi{X,t)p,..., gs{X,t)p, fp) C Fp[A,t]. 
Furthermore, for a polynomial q G S and a set G C S, we use the following notation: 
lm(g): the leading monomial of q, 

Lm(G): the set of leading monomials of the elements in G, 
lc(g): the leading coefficient of q, 
lt(( 7 ): the leading term or head of q, 
tail(g) := q — lt{q): the tail of q. 

3. Structure of the New Method 

Noro m has presented a modified version of Buchberger’s algorithm which com¬ 
putes Grobner bases over an algebraic number field using the arithmetic in Q[t]/(/). 
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Instead of computing in the ring (Q[t]/(/))[X], one might as well add the minimal 
polynomial / to the ideal to be considered and work over Q[X, t], see Theorem 5.1 
In this situation, the elements of a reduced Grdbner basis are, except / itself, all 
monic in (Q[t])[X], that is, they are of the form + (lower terms), see the proof 
of Theorem |5.1[ Noro noticed that during the execution of Buchberger’s algorithm, 
many (superfluous) intermediate basis elements of the form + (lower terms) 
are computed before a monic element X°‘ + (lower terms) is generated. Of course, 
each additional basis element produces new S-pairs which usually make the sub¬ 
sequent computation inefficient. Noro has resolved this problem by making each 
generated basis element monic in (Q[t])[X] before it is added to the basis. For this, 
the inverse of an algebraic number has to be computed which is in general compu¬ 
tationally expensive. Instead, we use a different approach to reduce the number of 
basis elements which are computed before a monic element X°' + (lower terms) is 
generated. 

The new method computes the reduced Grobner basis of the input ideal in three 
steps: In the first step, for a suitable prime p such that fp G Fp[t] is reducible and 


square-free, see Definition 


Fp w.r.t. yx, 


of /j 


p over Fp, 


as follows: 
with Td > 


5.2 


we compute the reduced Grobner basis Gp of Ip over 


Let fp — ni<i<rp 
1. Set li^p := {Hp 


fi^p be the irreducible factorization 
U {/i,p}) C Fp[X, t]. For each i G 
p of li^p. Using the Ghinese 


{!,..., Tp}, we compute the reduced Grobner basis Gi 
remainder algorithm for polynomials (see Algorithmj^below), we determine a set of 

polynomials Gp = {Ci^p \ {/i,p}^ mod fi^p which together with fp is the reduced 

Grobner basis of Ip with high probability (see Remark 5.6). Note that, at this step 
of the algorithm, computing modulo the different factors of the minimal polynomial 
fi,p (by adding them to the ideal (Hp)) is, from the theoretical point of view, just 
the same as computing modulo several prime numbers, see Section]^ 

In the second step, following HI [ID], we use the Ghinese remainder algorithm for 
integers together with rational reconstruction to lift these results to the reduced 
Grobner basis G of I. In the last step, we lift G to a Grobner basis G of / over K 
by mapping t to a (see Theorem 5.1). 

The idea of the algorithm is based on the concepts of modular methods and 
univariate polynomial factorization over finite fields. For the former we need the 
Chinese remainder theorem. 


4. Factorization and the Chinese Remainder Algorithm 

The well-known Chinese remainder theorem is essential for our algorithm. 

Theorem 4.1 f |141 Corollary 5.3]). Let R be a Euclidean domain and let mi ,..., 
mr G R be coprime elements so that gcd{mi,mj) = 1 for 0 < i < j < r. Let 
m = mi ■ ■ ■ mr be the product of these elements. Then R/(m) is isomorphic to the 
product ring R/{mi) x ... x R/{mr) via the isomorphism 

R/ (to) —>■ R/{mi) X ... X R/{mr) , 
a I—>■ (amodTOi,..., amodTOp). 

For our purpose, we need this theorem in the following two incarnations. 

Corollary 4.2. Let pi,... ,pk be distinct prime numbers, and let N = pi ■ ■ • Pk be 
their product. Then we have the following isomorphism: 

Z/{N)^¥p^ X ... xFp, . 

The second application of the Chinese remainder theorem refers to univariate 
polynomial rings over finite fields. 
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Corollary 4.3. Let /i,p,..., frp,p € Fp[t] be pairwise coprime polynomials, and let 
fp = fi,p • ■ ■ frp,p be their product. Then we have the ring isomorphism 

ifp) — (/l.p) X • ■ ■ X {frp,p) ■ 

The proof of Theorem |4.1| is constructive (see [HI Theorem 5.2, Corollary 5.3]) 
and yields the Chinese remainder algorithm. For reference, we state it here in the 
form of Corollary |4.3[ see Algorithmic 


Algorithm 1 Chinese Remainder Algorithm (CRA) for polynomials 


Input: qi,...,qr^ S ¥p[t], /i_p,..., e ¥p[t] pairwise coprime. 
Output: g G Fp[t] such that g = qi mod fi^p for 1 < i < rp. 


1 : 

2 : 

3: 

4: 

5: 


Hi 


, fi,P 


for i = 1,..., Tp do 


hi 


fp 

kp 


by the Extended Euclidean Algorithm m Algorithm 3.14], compute Si,ti G 
Fp[t] such that 

Sihi T tifi^p — 1 


6 : Ci i ¥iF(^qiSi, fi^p') 

{ci is the remainder in Fp[t] on dividing qiSi by fik 
7 : g < - 9 + Cihi 

8: return g 


Remark 4.4. 

a) Since Cihi = 0 mod fj^p for j i and Cihi = qiSihi = qi mod fi^p, we 
have 

g = Cihi = g* mod f^^p . 

Hence, the algorithm works correctly. 

b) Although stated here for ¥ p[f\, Algorithm^works for polynomial rings over 
any ground field. 

c) Instead ofqi,...,qrp G Fp[t], Algorithm^ can also be applied coefficient- 
wise to polynomials with coefficients in F^t] . 

5. Grobner Bases using Factorization and Modular Methods 

As Noro does (see El Theorem 1]), we rely on the following result whose proof 
we give for the lack of reference. 

Theorem 5.1. Let G be the reduced Grobner basis of I w.r.t. )^k- Then {G \ 
{/})k=a is the reduced Grobner basis of I w.r.t. ;^i. 

Consider the ring homomorphism 

ip : T —> S, 1 1 —> a, Xi i —> Xi. 

Since (f is the identity map on Q[A], we get an isomorphism 

^ = T/if). 

Clearly, i^(/) = I. We are now ready to prove Theorem 


5.1 
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Proof. Without loss of generality, we may assume that I ^ (1). Let 

G = {mi{X,t),... ,nia{X,t),ma+i{X,t)} 

be the reduced Grobner basis of I. We first prove that f G G. Suppose f ^ G. Then 
there exists a non-zero non-constant polynomial /' G GnQ[t] with deg/' < deg/. 
Hence 

/ = ^(7) = M/'),^(G\ {/'})) = (!) 

since ^{f') is invertible in S. This implies / = (1), a contradiction. So, / = mi{X, f) 
for some i, say i = a + 1. Then we have 

<P(G\{/}) = {mi{X,a),...,ma{X,a)} 

= (G\{/})|t=c.=:G. 

The result follows easily once we show that the leading coefficient of m{X,t), con¬ 
sidered as an element in the polynomial ring Q[t], is equal to 1 for all m{X,t) G 
G \ {/}. To prove this statement, suppose there is an index 1 < j < a such that 
lt(mj(X,t)) = c ■ X^ with c G Q[t] and degc > 0. Clearly, c is monic. Write 

m^ (X,t) = c - X^ + V(X,t) 

where V(X,t) = tail(mj(X,t)), which implies that V(X,t) does not contain any 
term divisible by X^. We have degc < deg / and therefore gcd(c, /) = 1 since / is 
irreducible. Thus, by the extended Euclidean algorithm (see [HI Algorithm 3.14]), 
there exist a,b G Q[t] such that a ■ c + b ■ f = 1. Considering the polynomial 
a • rrij {X, t) + b ■ f ■ X^, we have 

(G) ^ a - rrij (A, t) + b ■ f ■ X^ 

= {a ■ c + b ■ f) ■ X^ + a -V (A, t) 

= X^ + a-V{X,t) =: F{X,t). 

But lt(F(A, t)) = X^ divides c • A*^ = lt{mj{X,t)) which is a contradiction to the 
choice of G. □ 

The notion of primes which are admissible of type A w.r.t. a monic irreducible 
polynomial, which is essential for our algorithm, is defined as follows: 

Definition 5.2. Let / G Q[t] be as given above. Let p be a prime not dividing any 
numerator or any denominator of the coefficients occurring in /. We say that p is 
admissible of type A w.r.t. / if fp is reducible and square-free over Fp. In this case, 
we write fp as fp = ni<j<rp Igp- 

For a non-zero polynomial g G T considered as a polynomial in A over Q[t], that 
iS: 9 € (Q[t])[A], let Sg be the set of all distinct coefficients (in Q[t]) of g of degree 
greater than or equal to 1. That is, 

Sg = {lcQ[t](M) I u is a term of g with deg(lcQ[t](M)) > l} . 

With notation as above, the notion of primes which are admissible of type B 
w.r.t. a monic irreducible polynomial and a set of polynomials is defined as follows: 

Definition 5.3 (Weak version). Let H = {51 (A, t),..., gsiX, t)} be as given above. 
Let p be a prime not dividing any numerator or any denominator of the coefficients 
occurring in H. We say that p is admissible of type B w.r.t. / and B if p is 
admissible of type A w.r.t. / and if, for each g in H, none of the elements in Sg is 
divisible by any of the factors of fp over Fp. 
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To see the relevance of this definition, consider the ideal 


J = {x^ + xy + t,x + y + t - 1) =: (/ii,/i 2 ) C Q[x, 2 /,t] 

and the minimal polynomial / = + t + 1. If p = 3, then fp = {t— l)(t^ + t — 1) =: 

fi.p • f 2 ,p mod p and, using the degree reverse lexicographic ordering with x >- y, 


the reduced Grobner bases of the ideals 


(/i.p) and Jp + (/ 2 ,p) in ¥p[x,y,t] are 


{1} and + t —l,y + t + 1}, respectively. In this case. Algorithm cannot 
be applied since the sizes of these sets do not fit. The calculation suggests that the 
reason for this is that the element t — 1 G vanishes when reduced w.r.t. the set 

Next, consider the ideal J' = + xy t,t‘^x + y) =: (gi,( 72 )- Here, the 

reduced Grobner bases of the ideals Jp + (/i,p) and Jp + (/ 2 ,p) are {1} and + 
t — l,x + yt — t,y‘^ — 1}, respectively. Again the sizes of these sets do not coincide, 
hence, we still cannot apply Algorithm Moreover, none of the coefiicients in 
Sg^ and Sg^ i s divisible by either fi^p or / 2 ,p which shows that the condition in 
Definition 5.3 is not sufficient. Indeed, the element G Sg^ vanishes when reduced 
w.r.t. the set {t^ + t — I, t — 1}. Therefore, we may impose a stronger condition by 
saying that for all g € H none of the elements in Sg vanishes when reduced w.r.t. 
the set {/i,p,.. •,/t-p,p} (in some order) and thus reduce the probability that the 
reconstruction fails. In the following example we see that this condition is still not 
sufficient. 

Gonsider the ideal J" = {x^ + xy + tjx + y + t) =: (fci,fc 2 ). The reduced 
Grobner bases of the ideals J" + (/i,p) and J" + (/ 2 ,p) are {t — 1, a; — 1, y — 1} and 
+t — l,x + yt — y + t + l.y"^ + yt + y + t — 1}, respectively. Although none of 
the elements in Sk^ and Skg, vanishes when reduced w.r.t. the set {t^ -\-1 — l,t — 
1}, and the sizes of these sets coincide, we see that applying Algorithm yields 
— t + l,x — 1, y"^t^ + y‘^t — y'^ + yt^ + yt + + t + 1} which is not the desired 

result because the reduced Grobner basis of J" + (fp) is {t'^ +1 — 1, y + 1, x +1 + 1}. 
In practice, however, it is very unlikely that this case happens. It is, nevertheless, 
important to address this problem. A possible way to handle this difficulty is to 
refine Definition 15.31 as follows: 


Definition 5.4 (Strong version). Let / and H = {gi{X,t),..., gs{X,t)} be as 
given above. Let p be an a prime which is admissible of type A w.r.t. /, and 
write / = fi,p ■ ■ ■ frp,p as in Definition 5.2 Suppose that p does not divide any 


numerator or any denominator of the coefficients occurring in H. For i = 1,... ,rp, 
set li^p := {Hp U {/i,p}), and let Gi^p be the reduced Grobner basis of the ideal li^p. 
We say that p is admissible of type B w.r.t. / and H if for all indices i,j with i ^ j 

a) the sizes of Gi^p and Gj^p coincide, and 

b) Lm(Gi,p \ {/i,p}) = Lm(Gpp \ {fj,p}). 


In the above examples, the prime number 3 is not admissible of type B w.r.t. 
+ t + 1 and the generators of each of the ideals J, J' and J" in the sense 
of Definition |5.4[ This is because in the first two cases, both conditions of this 
definition are violated whereas in the third case, the second condition is not satisfied. 
For the rest of our discussion we use the strong version of this definition. 

We now turn our attention to the notion of lucky primes: 

Definition 5.5 fllOjl. Let I be an ideal given as above and let p be a prime number. 
Furthermore, let G be the reduced Grobner basis of I and let Gp be the reduced 
Grobner basis of Ip. Then p is called lucky for / if and only if Lm(Gp) = Lm(G). 
Otherwise p is called unlucky for I. 
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Input 


level 1 


level 2 


level 3 


Figure 1. General scheme for the new algorithm 


Since / is independent of X, we get, by Corollary |4.31 the isomorphism 

Fp[X,t]/(/p)^Fp[X,t]/(/i,p) x...xFp[X,t]/{fr^,p). 


Remark 5.6. Let I, H, and f be as above. Letp be a prime which is both admissible 
of type B w.r.t. f and H as well as lucky for I. We work over Fp[X, t] equipped 
with the product ordering >-k- Suppose a set of polynomials Gp is the reduced 
Grobner basis of the ideal Ip. For i = 1,... ,rp, set St := {Gp \ {/p}) mod fi^p C 
Fp[X, t]/{fi,p). Then for each i, t he set Si U {/z,p} is the reduced Grobner basis of 
the ideal It^p (as in Definition 5.4) with high probability. Conversely, let Gi^p be the 
reduced Grobner basis of C^p. Let Gp be the set of polynomials that is obtained by 
applying Algorithm^ coefficient-wise to the input 


Gl,p \ {/l,p}, ■ • • , Grp,p \ {frp,p}), (/l,p) • ■ •, /i 


rp,P 


Then the set Gp U {/p} is the reduced Grobner basis of the ideal Ip with high prob¬ 
ability. Hence, we have Gp U {/p} = Gp with high probability. 

The main innovation of our new algorithm, which is illustrated in Figure is as 
follows: Instead of computing the reduced Grobner bases at level 1, our algorithm 
computes them at level 2. For the primes satisfying the conditions in Definition [5^ 
(and only for those), the Chinese remainder algorithm for polynomials then com¬ 
bines these results at level 3. The ideals (Gp.) at this level are expected to be the 


same as the ideals Ip. at level I with high probability (see Remark 5.6). The re¬ 


maining parts of the computation are carried out in the same way as in the modular 
algorithms described in [TO] . 

Now we give a brief description of the new algorithm. In the beginning, randomly 
choose a set V of prime numbers which are admissible of type A w.r.t. /. At level 2, 
given a prime p G V, factorize / G Q[t] over Fp and compute, for each i, the reduced 
Grobner basis Gi^p of the ideal G^p corresponding to the i-th factor. If the prime p is 
admissible of type B w.r.t. / and H, then lift these results via Chinese remaindering 
for polynomials (at level 3) to obtain the reduced Grobner basis Gp of Ip with high 
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probability. Repeat this process for every prime p G V which is admissible of 
type B, in the same way as in the modular algorithms in |10j . 

The main reason why the method to compute Grobner bases over algebraic 
number helds described above is faster than other known methods, see Section 
is that factorizing the minimal polynomial / in positive characteristic allows us to 
compute in rings with minimal polynomials of degree much less than deg/: Ex¬ 
periments have shown that the performance of Grobner basis computations over 
simple algebraic extensions depends heavily on the degree of the minimal polyno¬ 
mial. Additionally, the computations are carried out over finite fields which avoids 
the problem known as coefficient swell, and we do not directly use the compu¬ 
tationally expensive arithmetic in K. Finally, the new method is a priori easily 
parallelizable. 


6. Modular Algorithms 

To compute the reduced Grobner basis of the ideal I, the modular algorithm 
described in [10] first chooses a set of primes V and computes the reduced Grobner 
bases Gp of Ip for each p G V. It then uses the Chinese remainder algorithm and 
rational reconstruction to obtain the reduced Grobner basis G over Q with high 
probability. Finally, it verifies the correctness of the result obtained in this way. 
One of the problems after computing the set of reduced Grobner bases GV := {Gp \ 
p G V} is that V may contain unlucky primes. To deal with such unlucky primes, 
the following method is used, see [3|: 

DeleteUnluckyPrimesSB (Iini): We define an equivalence relation on {GV, 
V) by 

{Gp,p) ~ {Gq,q) Lm(Gp) = Lm(Gq). 

Then the equivalence class of largest cardinalit'^ is stored in {GV,V), the others 
are deleted. ^ 

Now, all Gp, p G V, have the same set of leading monomials. Hence, we can 
apply the Chinese remainder algorithm for integers and the rational reconstruction 
algorithm to the coefficients of the Grobner bases in GV to obtain a reduced Grobner 
basis G of / with high probability. Since we cannot check, however, whether V is 
sufficiently large, a final verification step is needed. Since this may be expensive, 
especially if J ^ (G), we first perform a test in positive characteristic: 

pTestSB (Iini): We randomly choose a prime p ^ V which is admissible of 
type B w.r.t. f and H. We test if including this prime in the set V would improve 
the result. That is, explicitly test whether I reduces to zero w.r.t G mapped to 
Fp[A, t], and vice-versa, whether G mapped to Fp[A, t] reduces to zero w.r.t. Gp. 

The advantage of this test is that it accelerates the algorithm enormously. Al¬ 
gorithm is a modified version of Algorithm 1 in |10] (which is implemented in 
Singular [7] in the library modstd.lib [^), in the sense that we do apply modu¬ 
lar methods not only once, but twice, where the second application is with respect 
to the factors of the minimal polynomial /. 

Now, taking Theorem |5.1| into account, we can compute a Grobner basis of an 
ideal in K[X\ = Q(a)[A] as in Algorithm]^ We hrst map a to t and join the 
minimal polynomial / G Q[t] to the ideal to be considered. Then, after applying 
Algorithm we only need to map t back to a to get a Grobner basis of the input 
ideal. 


^Here, we have to use a weighted cardinality count if Algorithmj^requires more than one round 
of the loop, see [S] Remark 5.7]. 
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Algorithm 2 Modified modular Grdbner bases algorithm over Q 

Input: an ideal I = {H,f) QT = Q[A,t] where H = {gi{X,t), ... and 

/ G Q[t] is irreducible. 

Output: G C T, a. Grdbner basis of I w.r.t. '^k- 
1 
2 

3 

4 

5 

6 

7 

8 
9 

10 


11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 


choose V, a set of random primes which are admissible of type A w.r.t. / 

gr^{} 

loop 

for p G V do 

factorize fp G Fp[t] into irreducible factors fp = ni<i<rp /up 

for i = 1,... ,rp do 

h.p <— {Hp U {/j,p}) C Fp[A, _ 

compute the reduced Grdbner basis Gi^p of li^p w.r.t. 
if p is admissible of type B w.r.t. / and H over Fp then 

apply Algorithm coefficient-wise to the input ^(Gi,p \ {/i,p}, ..., 

Grp,p \ {/r-p.p}), (/i,p, • • ■, /r-p.p)) to obtain a set of polynomials Gp C 
Fp[A,t]^ 

Gp < — Gp U {fp} 
else 

Gp i — 0 

gv^gvu { Gp } 

{GV^V) i — DeleteUnluckyPrimesSB(^7^,7^) 

lift [QV^V) to G C T by applying the Ghinese remainder algorithm and the 
Farey rational map 
if pTjistSB(7, G, V) then 
if I reduces to zero w.r.t. G then 

if G is the reduced Grdbner basis of (G) then 
return G 
enlarge V 


Algorithm 3 Modular Grdbner basis algorithm over K = Q(a) (nfmodStd) 

Input: I = {gi{X,a),...,gs{X,a)) C S = K[X]. 

Output: G C S, a Grdbner basis of I w.r.t. ;^i. 

1 : map I to {H) via the map sending a to t 
2-.T^{H) + {f) 

3: call Algorithmj^to compute the reduced Grdbner basis G of / w.r.t. >-k= (!^i, 

4: lift G to G via the map sending t to a 
5: return G 


Algorithm is probabilistic in the sense that the test in lines IG to does 
not guarantee that (G) = I. If I is homogeneous, however, the result G of Algo¬ 
rithm]^ can be verified along the lines of [H Theorem 7.1]. With this test included. 
Algorithm is deterministic. 


Remark 6.1. Some parts of Algorithm^ are inherently parallelizable. In the cur¬ 
rent implementation, see Section we could easily take advantage of this thanks 
to Singular’s parallel framework. We have, first of all, parallelized the for-loop 
starting in line^ This corresponds to the modular computations on level 1, see Fig- 
Mre[7| Besides this, we also make use of parallelization for the selection of primes 
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in line^ for the application of the Farey rational map in line 16, and for the final 
test in line \1S\ The for-loop starting in line which corresponds to the modular 
computations on level 2, is inherently parallelizable as well, but experiments have 
shown that a parallel implementation of this step does not yield any further speedup 
for our test cases. 


7. Example 

The following example illustrates how the new algorithm works: 

Consider the ideal I = {x'^ + ay, axy — x + a) C Q(a) [x, y] where a is a zero of the 
polynomial / = + 1 G Q[t]. A Singular computation shows that the reduced 

Grobner basis of I with respect to the degree reverse lexicographical ordering (dp 
in Singular) with x >- y is 

{y'^ + ax + ay, xy + ax + 1, x^ + ay} . 

In the following, we show how this basis is obtained using our method: At level 1, 
let us choose k = 2 with pi = 5 and p 2 = 13. At level 2, we have fp^ = {t — 2){t + 2) 
mod Pi and fp^ = {t — 5){t + 5) mod P 2 - Now, corresponding to each factor, we 
compute, using Singular, the reduced Grobner bases of the following ideals: 

h.pi = {x^ + ty, txy — x + t,t — 2), 

h,pi = {x^ + ty, txy - x + t,tF2), 

h,p 2 = {x^ + ty, txy — x + t,t — 5), 

h,p 2 = {x^ + ty, txy - x + t,tFh). 

> ring r = 5, (x,y,t), (dp(2),dp(l)); 

> ideal Ilpl = x2+ty, txy-x+t, t-2; 

> ideal 12pl = x2+ty, txy-x+t, t+2; 

> option(redSB); 

> ideal SI = std(llpl); 

> SI; 

Sl[l]=t-2 
Sl[2]=y2+2x+2y 
SI [3]=xy+2x+l 

51 [4]=x2+2y 

> ideal S2 = std(12pl); 

> S2; 

S2[l]=t+2 

S2[2]=y2-2x-2y 
S2[3]=xy-2x+l 

52 [4]=x2-2y 

The Chinese remainder algorithm for polynomials combines these results at 
level 3 to obtain the reduced Grobner basis of Ip^ with high probability, as fol¬ 
lows: 

> list 1 = SI, S2; 

> list m = t-2, t+2; 

// CRA for polynomials (coefficient-wise): 

> ideal Glpl = chinrempolyCl, m); 

> Gpl; 

Gpl[l]=t2+1 
Gpl [2]=y2+xt+yt 
Gpl [3]=xy+xt+l 
Gpl[4]=x2+yt 
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Similarly, the reduced Grobner basis of Ip ^, with high probability, is 

> Gp2; 

Gp2[l]=t2+1 
Gp2[2]=y2+xt+yt 
Gp2 [3]=xy+xt+l 
Gp2[4]=x2+yt 

It is not hard to see that the primes pi and p 2 are admissible of type B w.r.t. / 
and H = + ty,txy — x Furthermore, it is also clear that they are lucky 

primes for I = {H,f). At this point we have to change the current base ring in 
Singular to characteristic zero in order to apply the Chinese remainder algorithm 
for integers and to pull the modular coefficients back to the rational numbers. 

/* Chinese remaindering for integers */ 

> ring s = 0, (x,y,t), (dp(2),dp(l)); 

> list 1 = imapCr, Gpl), imapCr, Gp2); 

> intvec m = 5, 13; 

> ideal j = chinremCl, m); 

> j: 

j [l]=t2+l 
j [2]=y2+xt+yt 
j [3]=xy+xt+l 
j[4]=x2+yt 

/* rational reconstruction */ 

> j = farey(j, 5*13); 

> j: 

j [l]=t2+l 
j [2]=y2+xt+yt 
j [3]=xy+xt+l 
j[4]=x2+yt 

Note that the computed result already coincides with the reduced Grobner basis 
stated above. To simplify the presentation, we therefore skip some of the steps in 
Algorithmic such as the final test. However, we have to map the result back to 
the ring Q(a)[x,j/] in Singular: 

> ring sr = (0,a), (x,y,t), (dp(2),dp(l)); 

> minpoly = a2+l; 

> ideal G = imapCs, j); 

> G = substCG, t, a); 

> G = simplifyCG, 2); // erase the zero entries 

> G; // G is the reduced Groebner basis of 1 
G [1]=y2+ax+ay 

G[2]=xy+ax+l 
G [3]=x2+ay 

Thus we get the same result as the one we mentioned at the beginning. 

8. Implementation and Timings 

We implemented Algorithm[Cin Singular in the library nfmodstd.lib [4] and 
compared its performance against the implementation of |10L Algorithm 1] in the 
Singular library modstd.lib (the command is modStd), the Singular command 
std, and the Magma 0 la command GroebnerBasis. For modStd, we added 
the minimal polynomial / to the given input ideal / (considered as an ideal in a 
polynomial ring over a polynomial ring) and computed the reduced Grobner basis 
of the ideal I = {H) + (/) w.r.t. 'i^k- For GroebnerBasis and std, we computed 


12 DEREJE K. BOKU, WOLFRAM DECKER, CLAUS FIEKER, AND ANDREAS STEENPASS 


Example 

Magma 

Singular 

Ideal 

Min. 

Poly. 

deg. 
of mi 

Groebner 

Basis 

std 

modStd 

nfmodStd 

1 c. 

32 c. 

1 c. 

32 c. 

11 

mi 

2 

1241.98 

1.51 

1.24 

0.37 

0.22 

0.13 

12 

m 2 

5 

error 

70.55 

19.59 

4.79 

1.89 

0.61 

I3a 

m 3 

7 

- 

0.90 

143.79 

9.34 

3.27 

0.51 

13b 

m 3 

7 

- 

314.00 

11212.00 

1118.78 

97.43 

19.23 

14 

m4 

6 

- 

265.53 

9163.38 

567.03 

686.01 

99.41 

15 

ms 

12 

- 

2061.95 

3321.28 

256.58 

430.23 

71.47 

16 

me 

2 

2.93 

8931.13 

197.20 

47.54 

24.26 

8.99 

17 

mr 

8 

- 

0.90 

2044.08 

195.41 

8.54 

1.87 

18 

ms 

7 

- 

15477.87 

15274.97 

4787.49 

92.99 

23.89 


Table 1. Total running times in seconds for computing a Grobner basis 
of the considered ideals with the corresponding minimal polynomial via 
GroebnerBasis, std, modStd and nfmodStd, using 1 core and 32 cores 
where applicable 


the reduced Grobner basis of the ideal I over an algebraic number field with the 
minimal polynomial /. Note that the implementation of our algorithm is internally 
linked with the existing implementation of Algorithm 1 in |10j . 

We have nine benchmark problems to demonstrate the superiority of our new 
algorithm (see appendix). The cyclic ideal Cn in n variables has become a bench¬ 
mark problem for Grobner basis techniques. For our algorithm, we have replaced 
the coefficients of this ideal by a random element in Q(a) where a is an algebraic 
number (see, for example, the ideal 16 in the appendix). Some of the benchmark 
problems are chosen from [2l[TT] (the ideals II and 12 are from [2], 16 and 17 are 
from m) where the coefficients are replaced by a random algebraic number. The 
minimal polynomials, selected for our computations, are: 

mi = + 1 , 

1712 — a “t“ 2 , 

1713 = — 7a -I- 3 , 

1714 , = Qp a^ -\- CL^ -f a -f 1, 

ms = a^2 _ 5^11 + 24a^° - 115a^ -f 551a® - 2640a^ 

-f 12649a® - 2640a® -f 551a'‘ - 115a® -f 240^ - 5a -f 1, 

me = a^ -I- 5a -I- 1, 

my = a® — 16a^ -I- 19a® — a® — 5a^ -I- 13a® — 9a^ -I- 13a 
-I-17, and 

mg = cj 10a® -f 5a® -t- 10a -f 1. 


With respect to these minimal polynomials, timings are conducted by using 
Singular 4.0.2 and Magma V2.21-2 on a Dell PowerEdge R720 machine with 
two Intel Xeon E5-2690 GPUs, 16 cores and 32 threads in total, 2.9-3.8 GHz, and 
192 GB of RAM running the Gentoo Linux operating system. 

The results are summarized in Table Some of the computations in Magma 
did not finish within 12 hours. This is indicated by a dash (-). Note that in all 
those cases, the computation also occupied an excessive amount of memory, more 
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than 100 GB at the point when we interrupted it. All timings are in seconds. We 
use the degree reverse lexicographical ordering (dp in Singular) for all examples. 

In our implementation, the number of primes which are chosen in line of 
Algorithm depends on the number of cores. For our timings, we started with 10 
primes on one core and 25 primes on 32 cores. The runtime depends heavily on the 
splitting behaviour of the minimal polynomial modulo the chosen primes. Finding 
the optimal strategy for this is still under active research. 

Remark 8.1. We understand that Magma has no parallel version of the Grohner 
basis algorithm which works over algebraic number fields. Therefore we have con¬ 
ducted the timings in Magma using one core only. 

From Table we see that the Singular commands std and modStd perform 
well in comparison to the Magma command GroebnerBasis. However, one can see 
that our algorithm nfmodStd is even much faster. 
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(1) ring R = (0,a), (x,y,z), dp; 
minpoly = (a~2+l); 

poly fl = (a+8)*x"2*y"2+5*x*y~3+(-a+3)*x"3*z+x"2*y*z; 

poly f2 = x"5+2*y"3*z"2+13*y~2*z~3+5*y*z"4; 

poly f3 = 8*x~3+(a+12)*y~3+x*z"2+3; 

poly f4 = (-a+7)*x~2*y"4+y"3*z"3+18*y~3*z"2; 

ideal 11 = fl,f2,f3,f4; 

(2) ring R = (0,a), (x,y,z), dp; 
minpoly = (a"5+a"2+2); 

poly fl = 2*x*y"4*z~2+(a-l)*x~2*y~3*z+(2*a)*x*y*z"2+7*y"3 
+(7*a+l); 

poly f2 = 2*x~2*y"4*z+(a)*x~2*y*z~2-x*y~2*z~2+(2*a+3)*x~2*y*z 
-12*x+(12*a)*y; 

poly f3 = (2*a)*y~5*z+x~2*y~2*z-x*y~3*z+(-a)*x*y~3+y~4 
+2*y~2*z; 

poly f4 = (3*a)*x*y~4*z~3+(a+l)*x~2*y~2*z-x*y"3*z+4*y~3*z~2 
+(3*a)*x*y*z"3+4*z~2-x+(a)*y; 
ideal 12 = fl,f2,f3,f4; 

(3) ring R = (0,a), (v,w,x,y,z), dp; 
minpoly = (a~7-7*a+3); 

poly fl = (a)*v+(a-l)*w+x+(a+2)*y+z; 
poly f2 = v*w+(a-l)*w*x+(a+2)*v*y+x*y+(a)*y*z; 
poly f3 = (a)*v*w*x+(a+5)*w*x*y+(a)*v*w*z+(a+2)*v*y*z 
+(a)*x*y*z; 

poly f4 = (a-ll)*v*w*x*y+(a+5)*v*w*x*z+(a)*v*w*y*z+(a)*v*x*y*z 
+(a)*w*x*y*z; 

poly f5 = (a+3)*v*w*x*y*z+(a+23) ; 
ideal 13a = fl,f2,f3,f4,f5; 

(4) ring R = (0,a), (u,v,w,x,y,z), dp; 
minpoly = (a"7-7*a+3); 

poly fl = (a)*u+(a+2)*v+w+x+y+z; 
poly f2 = u*v+v*w+w*x+x*y+(a+3)*u*z+y*z; 
poly f3 = u*v*w+v*w*x+(a+1)*w*x*y+u*v*z+u*y*z+x*y*z; 
poly f4 = (a-1)*u*v*w*x+v*w*x*y+u*v*w*z+u*v*y*z+u*x*y*z 
+w*x*y*z; 

poly f5 = u*v*w*x*y+(a+1)*u*v*w*x*z+u*v*w*y*z+u*v*x*y*z 
+u*w*x*y*z+v*w*x*y*z; 
poly f6 = u*v*w*x*y*z+(-a+2); 
ideal 13b = fl,f2,f3,f4,f5,f6; 

(5) ring R = (0,a), (w,x,y,z), dp; 
minpoly = (a"6+a"5+a"4+a~3+a~2+a+l); 

poly fl = (a+5)*w~3*x~2*y+(a-3)*w~2*x~3*y+(a+7)*w*x~2*y~2; 
poly f2 = (a)*w"5+(a+3)*w*x~2*y"2+(a~2+ll)*x"2*y~2*z; 
poly f3 = (a+7)*w"3+12*x~3+4*w*x*y+(a)*z"3; 
poly f4 = 3*w~3+(a-4)*x~3+x*y~2; 
ideal 14 = fl,f2,f3,f4; 

(6) ring R = (0,a), (w,x,y,z), dp; 

minpoly = (a"12-5*a~ll+24*a~10-115*a~9+551*a"8-2640*a~7 

+12649*a~6-2640*a~5+551*a'4-115*a~3+24*a"2-5*a+l) ; 
poly fl = (2*a+3)*w*x~4*y~2+(a+l)*w"2*x~3*y*z+2*w*x*y~2*z~3 
+(7*a-l)*x"3*z~4; 

poly f2 = 2*w~2*x~4*y+w~2*x*y~2*z~2+(-a)*w*x"2*y~2*z~2 
+(a+ll)*w~2*x*y*z~3-12*w*z~6+12*x*z"6; 
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poly f3 = 2*x~5*y+w~2*x~2*y*z-w*x~3*y*z-w*x~3*z~2+(a)*x"4*z"2 
+2*x~2*y*z"3; 

poly f4 = 3*w*x"4*y~3+w~2*x~2*y*z~3-w*x~3*y*z"3 

+(a+4)*x~3*y"2*z"3+3*w*x*y~3*z"3+(4*a)*y"2*z"6-w*z"7 

+x*z~7; 

ideal 15 = fl,f2,f3,f4; 

(7) ring R = (0,a), (u,v,w,x,y,z), dp; 
minpoly = (a"2+5*a+l); 

poly fl = u+v+w+x+y+z+(a); 
poly f2 = u*v+v*w+w*x+x*y+y*z+(a)*u+(a)*z; 
poly f3 = u*v*w+v*w*x+w*x*y+x*y*z+(a)*u*v+(a)*u*z+(a)*y*z; 
poly f4 = u*v*w*x+v*w*x*y+w*x*y*z+(a)*u*v*w+(a)*u*v*z 
+(a)*u*y*z+(a)*x*y*z; 

poly f5 = u*v*w*x*y+v*w*x*y*z+(a)*u*v*w*x+(a)*'u*v*w*z 
+(a)*u*v*y*z+(a)*u*x*y*z+(a)*w*x*y*z; 
poly f6 = u*v*w*x*y*z+(a)*u*v*w*x*y+(a)*u*v*w*x*z 

+(a)*u*v*w*y*z+(a)*u*v*x*y*z+(a)*u*w*x*y*z 
+(a)*v*w*x*y*z; 
poly f7 = (a)*u*v*w*x*y*z-l; 
ideal 16 = fl,f2,f3,f4,f5,f6,f7; 

(8) ring R = (0,a), (w,x,y,z), dp; 

minpoly = (a"8-16*a~7+19*a"6-a"5-5*a~4+13*a~3-9*a"2+13*a+17); 
poly fl = (-a~2-l)*x"2*y+2*w*x*z-2*w+(a~2+l)*y; 
poly f2 = (a~3-a-3)*w"3*y+4*w*x"2*y+4*w~2*x*z+2*x"3*z+(a)*w"2 
-10*x"2+4*w*y-10*x*z+(2*a"2+a); 
poly f3 = (a"2+a+ll)*x*y*z+w*z"2-w-2*y; 

poly f4 = -w*y~3+4*x*y"2*z+4*w*y*z~2+2*x*z~3+(2*a"3+a~2)*w*y 
+4*y~2-10*x*z-10*z~2+(3*a"2+5); 
ideal 17 = fl,f2,f3,f4; 

(9) ring R = (0,a), (t,u,v,w,x,y,z), dp; 
minpoly = (a"7+10*a~5+5*a"3+10*a+l); 
poly fl = v*x+w*y-x*z-w-y; 

poly f2 = v*w-u*x+x*y-w*z+v+x+z; 

poly f3 = t*w-w"2+x~2-t; 

poly f4 = (-a)*v"2-u*y+y~2-v*z-z~2+u; 

poly f5 = t*v+v*w+(-a"2-a-5)*x*y-t*z+w*z+v+x+z+(a+l); 

poly f6 = t*u+u*w+(-a-ll)*v*x-t*y+w*y-x*z-t-u+w+y; 

poly f7 = w"2*y"3-w*x*y~3+x~2*y"3+w"2*y~2*z-w*x*y"2*z 

+x"2*y"2*z+w"2*y*z~2-w*x*y*z~2+x~2*y*z~2+w~2*z~3 

-w*x*z"3+x"2*z~3; 

poly f8 = t"2*u"3+t~2*u~2*v+t~2*u*v"2+t~2*v~3-t*u"3*x 

-t*u~2*v*x-t*u*v~2*x-t*v~3*x+u"3*x"2+u~2*v*x"2 
+u*v~2*x~2+v"3*x~2; 
ideal 18 = fl,f2,f3,f4,f5,f6,f7,f8; 
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